IAM Monitoring Specialist

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week

Responsible for monitoring, analyzing, and investigating cybersecurity events and alerts across the organization’s technology environment for policy related violations. Provides support and analysis to cybersecurity detection and response processes while contributing to the continuous improvement of security monitoring capabilities and procedures.

• Monitor security alerts and events from cybersecurity tools and platforms to identify policy violation-based activity.
• Develop and maintain standard operating procedures and process documentation to ensure consistent event monitoring and response across the team.
• Correlate data from multiple security tools and sources to identify non-compliant network user activity.
• Analyze trends in security events providing insights and recommendations to cybersecurity leadership to improve detection and response capabilities.
• Collaborate with Cybersecurity, Technology, and First Line Risk teams and, at times, business lines to proactively mitigate risk through existing policies and procedures.
• Gather and share data to peers and leadership for internal audit and regulatory requests, ensuring highest degree of accuracy.
• Assists various aspects of remediation activities by drafting key actions, timeline, and communication plan.
• Effectively communicate monitoring activities and updates to stakeholders across Cybersecurity teams.
• Proactively respond to ad-hoc Cybersecurity analysis requests, questions, and issues.
• Maintain vendor relationships for specific security products or solutions, including communication around maintenance, issue resolution, and troubleshooting.
• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

• Partners with peers, manager, Cybersecurity teams, and First Line Risk team.
• Leverages established security monitoring, investigation, and incident response procedures to accomplish work. Work is reviewed for accuracy, completeness, and quality.
• Demonstrates working knowledge of cybersecurity monitoring tools, SIEM platforms, and other security technologies within the function.

• Bachelor's degree and a minimum of 2 years’ relevant work experience, or in lieu of a degree, a combined minimum of 6 years’ higher education and/or work experience inclusive of a minimum 1 year work experience in Cybersecurity, Technology, or Risk/Audit
• Demonstrated working knowledge of cybersecurity principles and compliance requirements

• Working knowledge of cybersecurity monitoring, investigation, and triage.
• Proven ability to analyze security events, investigate policy-related incidents, and identify root cause.
• Strong critical thinking, analytical, and problem-solving skills.
• Strong written and verbal communication skills, including documentation development.
• Ability to collaborate effectively with all levels of personnel and business partners across the organization.
• Proven experience translating technical requirements into clear policies and procedures.

#LI-JB3 #Hybrid